lexmark_universal_v2_ud1_installation_package_05142015.exe

Lexmark International, Inc.

The program is a setup application that uses the Self-extracting archive installer. The file has been seen being downloaded from www.bytesendclear.com and multiple other hosts.
Publisher:
Lexmark International, Inc.  (signed and verified)

MD5:
3a2098ff0b1aab40fed5b27826c70ec8

SHA-1:
117778eb1e5dfab8fa9e44baa5d50b13a5532e83

SHA-256:
b1d99e44ce20430be50c2e6ce4ee3952d507d1a36b753bab7c9dce0be038c999

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 9:35:58 AM UTC  (today)

File size:
117.8 MB (123,496,392 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Self-extracting archive

Digital Signature
Authority:
Thawte, Inc.

Valid from:
7/9/2013 2:00:00 AM

Valid to:
8/3/2015 1:59:59 AM

Subject:
CN="Lexmark International, Inc.", OU=ISS, O="Lexmark International, Inc.", L=Lexington, S=Kentucky, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
2D426DC00292C15DF480CF51AA81E580

File PE Metadata
Compilation timestamp:
12/1/2013 9:08:23 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3145728:y9k5FN/sxKK+c9DeWwFIjZgq3O3bciuflkVE9eivpi69D5n:yi5FN/sx8c9TfuwiutkWMUi69F

Entry address:
0x1D728

Entry point:
E8, F0, 57, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 56, 8D, 45, 08, 50, 8B, F1, E8, 05, FD, FF, FF, C7, 06, E4, 81, 42, 00, 8B, C6, 5E, 5D, C2, 04, 00, C7, 01, E4, 81, 42, 00, E9, BA, FD, FF, FF, 8B, FF, 55, 8B, EC, 56, 8B, F1, C7, 06, E4, 81, 42, 00, E8, A7, FD, FF, FF, F6, 45, 08, 01, 74, 07, 56, E8, D1, C9, FF, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 56, 57, 8B, 7D, 08, 8B, 47, 04, 85, C0, 74, 47, 8D, 50, 08, 80, 3A, 00, 74, 3F, 8B, 75, 0C, 8B, 4E, 04, 3B, C1, 74, 14, 83, C1, 08...
 
[+]

Entropy:
7.9996  (probably packed)

Code size:
149.5 KB (153,088 bytes)

The file lexmark_universal_v2_ud1_installation_package_05142015.exe has been seen being distributed by the following 22 URLs.

http://www.bytesendclear.com/GwtHYjMqEl8w4PTf02EpCpEEP4fnTBRKEC 0ek6o2mtP0jZ_jxAs_ZkEK0m8f4pPi0Vsgr8zQ4P7UCn1QQyDw RnkMZZgmsaC3lLfbKOAGyR3k6P5eWM0K7QJgXonIu3cmE6wD1tk5lNLNwx0hnDiBrC1AtQ3eTjwRRfRESsDoMdSam43exhf_mhqHA2p5qITR3ng3xs5tTbZaZHWC6v4x9eWvEpo2x1G2E1kTVlQlAlmpYN_smIfmEZHsyWdEzmVObXbd20q_6DrStp3keFoIUY7rkrb_PKyHka38v zPRT21Lt49khBdKVmnjUuQRX6lC34VI_PsiXbszkVSmLI08XuxOSpXix5 BXzI_QHP4dVaimUHv4Ap5CckHetTXV77kcdD6j158Vwo6K9qT Pw9h0h3tSXspO9fpFcp7Pdbh17bhPhxPM9q2Xd2lhq OR0rxMSRq5D22Ay1WWj8voyHS7SEJWtTVpbGQ2eGGazGrU2QaoJ5RZzFD_veOlnH62JY6R8Ykd7FABI6tdbF5bMNzYvxjly7CvyR7CtQvDYUN7OyYdhBpFK31tklp3KvVch4DAr6XlgoMsnJnGz4Jp4UepdxNqQ==-G3kAAORoXkzP0GblH3QjHOP4BsVbB8VhwmEiJxLULvcba1GQ7oC39SjqBcZ67Y4fbxNJruZY3wVGsMJ1O4p3BKIe91gcIxC3 bqVZAu8zXEW0_JzCD5bPFxkKhNSPcOCm68B-E

http://www.bytesendclear.com/LLbUcTdQ7jjdF0Lys53bwKlYufcqwqWLs5f1buzadkU4kQpQLiXGPesAD2K5KTwi0lZ4JQ_cuK6cJKH_3Qx1gL9OJQ2pZjUDV4Rq7zsCfj_tQd6Wb0aCoxFbiRvawTJLegDDuTqAp70ww_zu2vh1cPkA6omkR2Hzwga1eHin_zy5ZxHY qRdL7ulXkyYNuGZLt8g9vOZnKOz_D2AESJcdmCsGWJaSw==-G3kAAORoXkzP0GblH3QjHOP4BsVbB8VhwmEiJxLULvcba1GQ7oC39SjqBcZ67Y4fbxNJruZY3wVGsMJ1O4p3BKIe91gcIxC3 bqVZAu8zXEW0_JzCD5bPFxkKhNSPcOCm68B

http://www.bytesendclear.com/ 4kfo13RoL ey7ModNEeIVQtxmMf16XCGGyIOsQ_CDRMozvTxSawWmhgygPClRbjXcpahd8uFa0ZUZsKyKy0lduR04S1XSKDX2PhJaG5wAQq0xyBdH PKdRjrlzmA1Ub6 tQetmgmeThG533Ce_EufWiAa8K38JbEyVAd979pr7LAak7EphbAhV2pFAUiiOgRgcyqfjonmU_REbBbtPWeU0k MbG5rIuDOJ56jGVQHJkLQMI2CAFs1k_DsEZJ5NcH5yz6HwP6nAHVKBYJm8Q9dbee 0gs4TD66nooNLCc6_UeDducOTO9vET OKPwFLFBEui1m0UThfRCPrfebiwAgbdOSBHpKWf bzB1fSFATkQ_jrgOJ2LVrxgQ5XkMsdbq2muTZpYmgf5GMQqdTikrjuLwR9gPPc9aeKbZszrkJHW1zvk42K3LiqzlGV81A 9u_1Bp0QFBTsW1nAAzFahUjKrWboA veO1NSysJ2UHSXqLZ25XHvhn1j4yoLCkOhXjbFYeonFMlxKPbGfyAXsYxFjMTfXSvlN 8gA0wng1e4j7sHXJGApszBxXaxghmZEs1hkwz6NCKbh4xZWT_dnGM2F0Y3bBA==-G3kAAORoXkzP0GblH3QjHOP4BsVbB8VhwmEiJxLULvcba1GQ7oC39SjqBcZ67Y4fbxNJruZY3wVGsMJ1O4p3BKIe91gcIxC3 bqVZAu8zXEW0_JzCD5bPFxkKhNSPcOCm68B

http://www.bytesendclear.com/7wFk4EWZ0IvouXFZvTQ02C9IZAEdzvb1UVT04cAhODFTmxHEOkbv4vCeniIo5Wl5PdeWj37FjpUNwTeY11HkkHy10CKG0qu2m698m3E5y3uG8GcMV8JtcG5WvoprwzGGdCukT8 zF10brjyS5_4W5IY054gzI2TULF0B8jC9 qUiQOFJT RAWPtJjcNTo3oSH2IBNyg1H5YTOB1VTrXaJplgjxXyl20OVjECvC8zE3kZmSmCVsjDmZXwNDh8EonydIxK6NduHb6iZpSTlk2cbmrT2HApPXw0O fEAp8lTZ9PUN0x0v2oO9Dk4Ju GiLNnTJMXU8HBIL64NFn_ibaau8FrhskZGKVU9y1 oXleH5Tvq2I9FCI30X381Rz4S4UlgGmzYWORxLtYKh4WnSKXvVyMDi94SbffQySoKhN2_6If7HV0GtC5SbmjPaVdeEvzEnxJ86A94AbN5hq8Tbnd5Jxk7yB5OsnW8kF3fvJiou0r4f1LL9GhevzGKj9djATwI7qSwcj5vdueFv7 MzxgTCntuGNI6q0oCBbvJ6YwvyszovFk0U rg8UjLI5YKL6iIs6T6LizxnxBj69T4ksP0hk4tGvhw==-G3kAAORoXkzP0GblH3QjHOP4BsVbB8VhwmEiJxLULvcba1GQ7oC39SjqBcZ67Y4fbxNJruZY3wVGsMJ1O4p3BKIe91gcIxC3 bqVZAu8zXEW0_JzCD5bPFxkKhNSPcOCm68B

http://www.bytesendclear.com/ BmAvZIgvsg4uPLvdDt3aCV 7NJ25NPrDacrx6NHUnMUM1p1fC1DIpfwUc8I7gmehKvcJZ8VjDAAykhDcmxwgVrTEpzyKAtngs7DBahFW xgSmcoeLLMdud kElfrcwzhZ72WQC9fxejPAHtZbg2F53VjrZknlbfeW7cOI9clBHQFGc5yp 8BNhkpjsjmndmdTsGw_6HzRfSnnFHZrOxleX33KUV56AsCYtR9o6NLBhEz8Lf_5LmM2 p vJvFvrAUBydR0 hsTVVVHMS62cr8GgG2cmllTpgv_hl4nJKcy2gEmSksVYy3hEOeSp6J2YCo4 15GiF_g E gnD3UQ5MRPjF_gP4PWV9XU_uLwYB18flXfrlobbFW 8KFJj0 KHa7qj9y0 _97TQM8xTpVR0EHCnZvGmNOc4wuKHWjiuG5WLyvaKtYNhClzAr1XcW4VJdYA2vHJGcYbkvnoZiYOvKZvq0oRU0qHYj8zbj1yLWEFHi3mBQUSisfGs3hnoUjrxpic Cb7bHwpPf pHkd5mMs0tQQ6DkuTMntSM9ezKHoi0KgIvEdzoD_zuW0xoYq78BQ CIe2mhDZtBHjRqmmudIlwSukKQ==-G3kAAORoXkzP0GblH3QjHOP4BsVbB8VhwmEiJxLULvcba1GQ7oC39SjqBcZ67Y4fbxNJruZY3wVGsMJ1O4p3BKIe91gcIxC3 bqVZAu8zXEW0_JzCD5bPFxkKhNSPcOCm68B

http://www.signtowntoday.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

http://www.bytesendclear.com/RWEDERGoObuSKSJ78OYSqoBgYAW0EG8I7PJ0L7v2qfjYOC1gESsh4ldozQFDk1dnJj1 OJt4E3A9W1FbmsqOAANPDcpnMnfVjlDDYUJ43Nuss_uuU5se6vcLpf4yK9ZQ9MpcMma3Z1Ib_Er5ckxOXyv7eOtwG5Wb_lkdOTxv4Wumk80YgpRrSI G7B2slFv00KLwE_mbVHOj9jNeUnKzmIYlAAqg2_FD3jwN6ltxR4 Nk3lnaKKjW97NJYDKOQLOM6bZvQR2i2eRnZC3ghNJMioztF3hVkz_Kb0yLdTB8hbszJBJ8DzwhYRVlCemuyGzWKWHTNgBwHALRL6eBIpL9dvGtTXJ4pKTEoXAmuJC5anrvDJazFtjRsJfwr2nnBoB0ZJ6R1EEKyE3TNkC6wBRfkbDTgken1ih5h8ynVDsKQWpn2iih LHBedNMGO CYLZRRp9AoF7jd92Bi1Pm pRvbfd2SmTsgyYgMcpVKmnSLFPq1VwFH i9iGVNov5rkySHZDduFU7u_8ldx0WPFHFzH5a_rpx1u1OEUI2FBzOATRCJwQh7sisce1jjfHBHbjiW3cLEB3q rfowgYQXXUpzZD4WRLrZQ==-G3kAAORoXkzP0GblH3QjHOP4BsVbB8VhwmEiJxLULvcba1GQ7oC39SjqBcZ67Y4fbxNJruZY3wVGsMJ1O4p3BKIe91gcIxC3 bqVZAu8zXEW0_JzCD5bPFxkKhNSPcOCm68B-E

http://www.bytesendclear.com/3f kPlW4vTslwF6oJeJumS7iq3 dumGSPjVx_KdR07IyQfK53D68pcZWdloSCpMJxU77zYQpTvhGu430YaJ sR6JSJC6pnh8IxpCi74_wXNGT9ssKOkHBgEf0k_tVB2spDq1GnXff Bmc BzPgMRlH4BJv4Uai3EJ7JfwKyd3mNbvxItH4d6uXjDIYO3rJNGszBan8TrWv1nrgPyXBKBl3btL64F_OnvCpEe OfCfSLOcuBCyy9Qp1zuEPcaQSHKXoA eZGpjio5dwHRHXfwFio7shhDn8FC6GLEofhCmn3zvHrR8nMiQcKQLVYOc8sjy5wJSNzfO4oAlV7M9R3shYfn2MDJML4vCaTAxPd8Hi8mbB q_JiWY 0cvorXIFIe56khVoIPi0V54yFopUUw7hiJRH79Qpv1SPV6wofQGNec723VwHhnmK71oMVs7lNrNeJ6yH0Z2u3MJNs3jnF9_wDFE5fd1a6Tcl2J xriyQnYONcSr8cxYXYbzlP yEHu6 m0pF7 zsnUFj7lBLNT8lPhGPpwX8AMMhRx6Jk8N38U0IbNBt4gnx9lmeugicB_xPa56HMadjJx0 omSg5Hnooe ghCgQ==-G3kAAORoXkzP0GblH3QjHOP4BsVbB8VhwmEiJxLULvcba1GQ7oC39SjqBcZ67Y4fbxNJruZY3wVGsMJ1O4p3BKIe91gcIxC3 bqVZAu8zXEW0_JzCD5bPFxkKhNSPcOCm68B-E

http://www.bytesendclear.com/UWjH8qpZTkw4lhBxLq4vb5pmhH dTfiHqHcg9rQwlApwnjyWxxun3PkpPsEKDQE4C_wb1sQYScxSVVLRvKrhKGOFOnuPJXeelFJSzrdMkzoZuVsTdnPHh4johHJ_EZz4a E5t22Zt5I96ZaJPReY7XjVpfxS2ng7O0NVq2itYNgfYKW1iDKEMqfMVCmxd3dJ3FwQZF0Ds5oGlSwYSYh4lcmJVaGxr_kM4Y6L8Twc4ZqJXI0su3Y2iUbRCWXWZBDg8pa_VtE2aL6mZpeglSrVcsnGahliNB9J2S0dOnvFzw_mxCZPnb84EpXQqolYjSdqKa6qNLMuqQZXsA1qyxhSYjB3ut_dRrL8B50tmkPFc8E30n2jDR7oJVfeFkkKzIfgxmWtV9LS9bXtD8sR3JJJmExNPWeg7cVVT54IuYs24QDy8HGnK_Zj8ZKMyGzAgH1T0p014 8sDWvQuuIhpMyih1QAKVvUBWgwr3Yz7A WNTN_nOOq56QRC7cm hUzKh4BJwuWcZE7UPOx8wV7a_Oc8UEyVEz6hUWiIW4qv f6g2ounsgaJwkHVMZh5z1PY9RGNKEDfLiAK0UgHnUgrNPEYUssp9zv4g==-G3kAAORoXkzP0GblH3QjHOP4BsVbB8VhwmEiJxLULvcba1GQ7oC39SjqBcZ67Y4fbxNJruZY3wVGsMJ1O4p3BKIe91gcIxC3 bqVZAu8zXEW0_JzCD5bPFxkKhNSPcOCm68B-E

http://www.bytesendclear.com/c?x=lyOC6ELngnXuWosxWwj6am647ZTFgHYho pEKeP3a78=&e=1&c=/zGGrMPPMKHN2ZNSyYpUV2tVIuZz1nyyW9kvukhmJQ9Y4rZcUwvGBuU0kI Im1DO1r0bg9l0ODzPoCuJFIlYbX59Bz/imseftRk0iQUZ0qjNXMlJCapYCiTs2VNci9B7zwg6YJdOKU2AbTI2PwNqJSRVy0VUBgjj2rjcHuja7hA=&fallback_url=http://files-download.poradnikdogry.pl/SterownikiIPoprawki/Drukarki/Lexmark/.../Lexmark_Universal_v2_UD1_Admin.exe&downloadAs=Lexmark X1195 - sterownik.exe

http://www.bytesendclear.com/LyIxQ3OkTG03GuoOUq85IlVasSBHUsKDDZv9szj9t1UeDH6ELGibwPgYD_MGceI pAEuyI7mq5coSkiv8FJKuPlgeYjC9T7V_8odbhJjE7IZk_vofPuRb432Y0T1e1svYOQpFomIftsVLD_IK8bqW6z7 6p 7d02HB17qsBJ1ffxmb3WRrggDcuKJCMEY84J4XW1s9EWoH17cPe YBGI2rVp8QAzPLM5vsFyjXzxnaW0qo4QCDUdHuCCwDl_GFLsdWaxDnDb3uw09x8bvGXOxeeE2mcyPm2 izhYEi_UJVHW6Gv21h7pkIgUT5Ehm3zrq26Aw1BhofRBHDjNS8HBkvwuX7P89Vbm3qz51M cFEFlMJwigjcyCQCWQyf6lh6qeMz7X4oVYYuvt5L71QFpjIv81cHg2ocwg kv6kFyPeOemwEJ43Qt3gsrm0o1e6TqjBE_J_3YN1gCi0UKcXbOKv_qqJSfGM5OuV7cu c_FRLKCb4laO5pAaO6bSg M4NYWWt2JYMkRwUzBcgHbm1eKGVCVWAbpu13o8FmRB8DEQ49vMTjPow5zOgqHP9nHygJMzCrgycX3RXYtmLgHRy6wBEVJNGgoSaTkQi3ktVUngWoomMeGGQ=-G3kAAORoXkzP0GblH3QjHOP4BsVbB8VhwmEiJxLULvcba1GQ7oC39SjqBcZ67Y4fbxNJruZY3wVGsMJ1O4p3BKIe91gcIxC3 bqVZAu8zXEW0_JzCD5bPFxkKhNSPcOCm68B-E

http://www.bytesendclear.com/L7_NLU_eElqpR3iYrfDMv1H8U5uTSPlhhAifzhmRY5nK4rpVABEeDHokk3Ijw1HudA7wyrn_DxRm3JFO8907pdfqBmHTUb56oWxCK1j1uLwgZJryzs0M5NSGR9yn26o8jJqKneIStcURTu5WjmL0a3OE2QxLBH67rb_WQnC YZ8OqPjXL3WZBa8PUO5jchloYmaOVSgbaPsGt8Nnb72UJ52fnU8HJNN9KrgoKq92C_ppsmdNZFP3ysVgDYiU r_T0YQWTqwVAXheyDeRCBKthopZYRKRVQAGhR6mleJ7aquziCOOkOujwBQUMHDCv6_BFeuJurS2jf2PXZjS6cdC3L1OWidGZfAk7qrN9Xeja jZtEbV4RwxE0MPoxmOi5BS55ReQ7gt2QdD8N8GOYUzPG gJoLA77nKNRhaWV11O7V4mgIxMXdKliAskUlZW6abESl7HbW82k2itKtCorKYi58 BL94fpISJWYzVltiHNtBdkyZ1yaaZvrpL28kjdw8T74UzY LVlvqMoAAdllBjYPptKwlwYGsUmD2F1rev5SpUvGeikcv6vpEFSbaXI y3LjVjBGIcyYYU_rhwSNs_4ZJ__j__A==-G3kAAORoXkzP0GblH3QjHOP4BsVbB8VhwmEiJxLULvcba1GQ7oC39SjqBcZ67Y4fbxNJruZY3wVGsMJ1O4p3BKIe91gcIxC3 bqVZAu8zXEW0_JzCD5bPFxkKhNSPcOCm68B-E

http://www.bytesendclear.com/c?x=auUr2V0e78k5FTJ1ACyfV53epFDd7A461TVo0rgF4HU=&e=1&c=yppN7FPKxs50EtknWp924d3r2qaMaL1TaZQv7ySqxrRXM ZwlHB02p U8txUdA5wtCTPqk541xa3EUcTLm d6aNBMkBdwAPrb3FlDYROFL0hgk11jjViRkg6rkLBm7EA1H/k WvcDEjieBAqPm7z5T24GHsAX7oD16rU9BQO4Co=&fallback_url=http://files-download.poradnikdogry.pl/SterownikiIPoprawki/Drukarki/Lexmark/.../Lexmark_Universal_v2_UD1_Admin.exe&downloadAs=Lexmark X1190 - sterownik.exe